Is myholidays.com safe?
myholidays.com is not flagged as malicious, but it is not a clearly safe site either. The correct call is cautious use only, with extra verification before entering sensitive information.
Valid · TLSv1.3
None detected
GoDaddy.com
March 18, 2026
Website Screenshots
myholidays.com scores 63/100 and is classified as suspicious, not clearly safe. The site uses a valid TLS 1.3 certificate issued by GoDaddy TLS Intermediate CA DV - R1v1, but the scan also found a 403 response and missing security headers.
SSL Certificate & HTTPS Security
myholidays.com has a valid SSL certificate and supports TLSv1.3, which means traffic can be encrypted in transit. The certificate is issued by GoDaddy TLS Intermediate CA DV - R1v1 and expires in 186 days, so the HTTPS setup is active and currently valid.
That said, HTTPS alone does not make a site safe. The scan found HSTS is not enabled, and the site is missing multiple security headers: X-Content-Type-Options, X-Frame-Options, CSP, Referrer-Policy, Permissions-Policy, COOP, COEP, CORP, and X-XSS-Protection. Those gaps reduce browser-side protection and are a real security weakness.
Threat Intelligence Results
The threat checks are clean across the major sources in this scan. Google Safe Browsing shows Clean, URLhaus is Clean, and DNS blocklists from Spamhaus/SURBL are also Clean. There is no direct evidence here of malware hosting, phishing, or spam infrastructure.
Clean threat feeds are a positive signal, but they do not override the overall risk rating. The scanner still assigns a suspicious verdict because the site lacks hardening and returns HTTP 403, which indicates restricted access and prevents normal inspection of the live content.
Domain History & WHOIS Analysis
The registrar is GoDaddy.com, LLC, which is a mainstream registrar and not a red flag by itself. The domain is not listed as a known domain in the scanner, and the domain creation date is unknown in the available data, so there is no verified age history to rely on.
The scanner AI classifies myholidays.com as a generic travel domain with no known malicious associations or threat infrastructure in its training data. That supports a low-to-moderate trust profile, but the lack of domain age visibility means you cannot use registration history to confirm long-term legitimacy.
Is myholidays.com Legitimate?
The evidence does not support calling myholidays.com malicious. It has a valid certificate, no blocklist hits, and no Safe Browsing or URLhaus flags, which are all positive signs.
At the same time, the 63/100 score, missing security headers, unknown domain age, and 403 access response justify caution. This is not a site to trust blindly with personal or payment data until you verify who operates it and why access is restricted.
Scan Details
Security Headers
Frequently Asked Questions
is myholidays com a safe site?
No clear safety confirmation exists for myholidays.com. The scan gives it a 63/100 suspicious score, even though Google Safe Browsing, URLhaus, and DNS blocklists are all clean.
Does myholidays.com have a valid SSL certificate?
Yes. The site uses a valid TLSv1.3 certificate issued by GoDaddy TLS Intermediate CA DV - R1v1, and it expires in 186 days. That protects data in transit, but it does not prove the site is trustworthy.
Why is myholidays.com marked suspicious if there are no malware flags?
Because the scan found weak security hardening and limited visibility. The site is missing HSTS and many key security headers, and it returns HTTP 403, which blocks normal inspection of the content.
Is myholidays.com on any blocklists?
No. Google Safe Browsing, URLhaus, and DNS blocklists from Spamhaus/SURBL all show clean results. That lowers the chance of known malicious activity, but it does not make the site automatically safe.
Can I trust myholidays.com with personal or payment details?
Not without extra verification. The domain has a valid certificate and no threat-feed hits, but the 63/100 suspicious score, unknown domain age, and missing security headers mean you should verify the operator before sharing sensitive data.
Run your own scan
Check any URL instantly
Private, free, no account required. Your scan results are never made public — unlike VirusTotal.